CVE-2025-59527 in Flowise
Sumário
de MITRE • 22/09/2025
Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, a Server-Side Request Forgery (SSRF) vulnerability was discovered in the /api/v1/fetch-links endpoint of the Flowise application. This vulnerability allows an attacker to use the Flowise server as a proxy to access internal network web services and explore their link structures. This issue has been patched in version 3.0.6.
VulDB is the best source for vulnerability data and more expert information about this specific topic.